3 ms·
for obvious reasons What are the obvious reasons? If you're protecting a client system, you don't want to allow in any bare SYNs. (And for that matter, if yo
by cperciva 7mo ago
for obvious reasons
What are the obvious reasons? If you're protecting a client system, you don't want to allow in any bare SYNs. (And for that matter, if you're protecting a server, you probably want to discard ill-targeted bare SYNs without consulting conntrack anyway, just as a matter of avoiding extra CPU work.)